sigstore

Documentation

Overview

Package sigstore provides a client for verifying artifacts using sigstore

Index

• Constants
• type Sigstore
  • func New(sigstoreTUFRepoURL string, authOpts ...container.AuthMethod) (*Sigstore, error)
  • func (s *Sigstore) Verify(ctx context.Context, artifactType verifyif.ArtifactType, ...) ([]verifyif.Result, error)
  • func (s *Sigstore) VerifyContainer(ctx context.Context, owner, artifact, checksumref string) ([]verifyif.Result, error)

Constants

const (
	// SigstorePublicTrustedRootRepo is the public trusted root repository for sigstore
	SigstorePublicTrustedRootRepo = "tuf-repo-cdn.sigstore.dev"
	// GitHubSigstoreTrustedRootRepo is the GitHub trusted root repository for sigstore
	GitHubSigstoreTrustedRootRepo = "tuf-repo.github.com"
	// LocalCacheDir is the local cache directory for the verifier
	LocalCacheDir = "/tmp/minder-cache"
)

Types

type Sigstore

type Sigstore struct {
	// contains filtered or unexported fields
}

Sigstore is the sigstore verifier

func New

func New(sigstoreTUFRepoURL string, authOpts ...container.AuthMethod) (*Sigstore, error)

New creates a new Sigstore verifier

func (*Sigstore) Verify

func (s *Sigstore) Verify(ctx context.Context, artifactType verifyif.ArtifactType,
	owner, artifact, checksumref string) ([]verifyif.Result, error)

Verify verifies an artifact

func (*Sigstore) VerifyContainer

func (s *Sigstore) VerifyContainer(ctx context.Context, owner, artifact, checksumref string) (
	[]verifyif.Result, error)

VerifyContainer verifies a container artifact using sigstore